Information on the Processing of Personal Data (Privacy Notice)

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR)

1. DATA CONTROLLER IDENTIFICATION

The data controller responsible for the processing of your personal data is:

• Company Name: MONKEY BROTHERS s.r.o.
• Registered Office: Červený dvůr 1172/17, 794 01 Krnov, Czech Republic
• Company Reg. No. (IČO): 28276141
• VAT ID: CZ28276141
• E-mail: info@chimpanzeebar.com
• Phone: +420 774 747 970
• Websites: www.chimpanzeebar.com and www.chimpnutrition.de

2. PURPOSES, LEGAL BASES, AND CATEGORIES OF PROCESSED DATA

We process your personal data strictly for specified, explicit, and legitimate purposes:

A. Fulfillment of Purchase Contracts & Order Processing

• Purpose: Processing your order, delivering goods, managing billing, issuing invoices, and providing customer support.
• Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR).
• Data Categories: Name, surname, billing address, delivery address, e-mail address, telephone number, payment details, items ordered.

B. Compliance with Legal Obligations

• Purpose: Fulfilling legal requirements under tax, accounting, and consumer protection laws (e.g., maintaining sales records, handling claims).
• Legal Basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Data Categories: Invoicing data, transaction logs, tax records, warranty claim documentation.

C. User Account Management

• Purpose: Creation and maintenance of a customer user account on our Website.
• Legal Basis: Performance of a contract or taking steps prior to entering into a contract (Art. 6(1)(b) GDPR).
• Data Categories: Registration details, password hash, purchase history, saved addresses.

D. Direct Marketing & Newsletter (Customers)

• Purpose: Sending promotional communications regarding similar products to existing customers.
• Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) / ePrivacy regulations. You may opt out at any time.
• Data Categories: E-mail address, purchase history.

E. Direct Marketing & Newsletter (Non-Customers)

• Purpose: Sending promotional material, offers, and news to registered subscribers.
• Legal Basis: Consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
• Data Categories: E-mail address, name (if provided).

F. Website Operation, Analytics & Cookies

• Purpose: Ensuring website functionality, security, measuring site analytics, and delivering personalized ads.
• Legal Basis:
  • Essential Cookies: Legitimate interest (Art. 6(1)(f) GDPR).
  • Analytical & Marketing Cookies: Consent (Art. 6(1)(a) GDPR) collected via the cookie consent banner.

3. DATA RECIPIENTS (PROCESSORS AND THIRD PARTIES)

Your personal data may be shared with trusted third parties (data processors) solely to assist in fulfilling our contractual or legal obligations:

1. Shipping & Logistics Providers: Delivery services (e.g., DHL, DPD, Czech Post, local carriers) to deliver ordered goods.
2. Payment Service Providers: Payment gateways and banking institutions to process online transactions.
3. IT & Cloud Service Providers: Hosting providers, web application developers, and database management tools.
4. Marketing & E-mail Services: Platforms used to send transactional and promotional emails (e.g., Mailchimp, Klaviyo).
5. Legal & Accounting Advisors: External accountants, tax advisors, and legal representatives where required by law.

4. INTERNATIONAL DATA TRANSFERS

We store and process data within the European Economic Area (EEA). If any third-party processor transfers personal data outside the EEA, we ensure appropriate safeguards are in place pursuant to Chapter V of the GDPR (e.g., Standard Contractual Clauses (SCCs) approved by the European Commission or Adequacy Decisions).

5. DATA RETENTION PERIODS

We retain your personal data only for as long as necessary to fulfill the purposes outlined above:

• Order & Contract Data: For the duration of the contractual relationship and until the expiration of statutory warranty periods (typically 2 years).
• Tax & Accounting Documents: Retained for the statutory period mandated by law (generally 10 years from the end of the tax period).
• User Accounts: Until you delete your account or after 2 years of inactivity.
• Marketing Communications based on Consent: Until you withdraw your consent.

6. YOUR RIGHTS UNDER GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request confirmation on whether we process your data and receive a copy.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal data.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Request deletion of your personal data when statutory grounds are met.
• Right to Restriction of Processing (Art. 18 GDPR): Request that we temporarily limit the processing of your data.
• Right to Data Portability (Art. 20 GDPR): Request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): Object to processing based on our legitimate interest or for direct marketing purposes.
• Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@chimpanzeebar.com.

7. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data is being processed in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority:

• Lead Supervisory Authority (Czech Republic):

  Úřad pro ochranu osobních údajů (Office for Personal Data Protection)

  Pplk. Sochora 27, 170 00 Prague 7, Czech Republic

  Website: https://www.uoou.cz

• Alternatively, you may contact the supervisory authority in your local EU Member State of habitual residence or workplace.

8. AUTOMATED DECISION-MAKING AND PROFILING

We do not use automated decision-making or automated profiling that produces legal effects concerning you or similarly significantly affects you (pursuant to Art. 22 GDPR).

9. UPDATES TO THIS PRIVACY NOTICE

We reserve the right to update this Information on the Processing of Personal Data to reflect operational or legal changes. The current version will always be published on our Website with the date of the last update.

Last updated: July 23, 2026